Privacy policy
This policy explains what personal data cs2demo.gg processes when you use it and why, how long it is kept, and how you can use your rights under Turkey's data protection law (KVKK, Law No. 6698) and the EU's GDPR.
Who we are
cs2demo.gg is run by Muhammed Esad Kaya, a private individual based in Türkiye, who is the data controller for the personal data described here ("we", "us"). For anything about your data, write to [email protected].
What we process
- Your Steam account: when you sign in with Steam, your public SteamID, name and avatar address. For your player card we also read what your Steam profile shows publicly: the year the account was made, your country, whether it has VAC or game bans, your Steam level and your CS2 play time, and refresh them at most once a day. We never see your password; you sign in on Steam's own page.
- Your FACEIT profile: we look your SteamID up in FACEIT's public data and, if a FACEIT CS2 profile uses it, keep its public part: nickname, country, region, level and Elo, rankings, lifetime and per-map statistics, and your latest FACEIT matches (map, score, result, your numbers). We read it at sign-in and at most every few hours after that, and show it only to you. We do not connect to your FACEIT account or see anything that is not public. We also keep the scoreboards of FACEIT matches you open (both teams' public numbers).
- Other FACEIT players you look up: when you search for a FACEIT nickname or open a player, we ask FACEIT for that player's public profile and show it to you. We keep it in memory for a few minutes so the page loads quickly, and never store it.
- Demos you upload: the demo file only while we analyze it (it is never stored), and the replay and statistics we make from it. A demo contains the public SteamIDs, in-game names, positions and match events of everyone in the match. When someone who signed up with us played in a match another user added, the match also appears in their own library (without the name of the file or who added it); removing it there keeps it out for good. Your profile lists the players most often on your team in your matches, with how your matches together went; only you see that list.
- Pro matches: recordings of matches from public professional tournaments, from a public archive of the demos HLTV.org publishes. Like any demo, they hold the players' public SteamIDs, in-game names, positions and match events. Signed-in users can watch them like any other match: the players' in-game names, statistics and positions. The pages do not show the players' SteamIDs, though the recording carries them, as every copy of it does. A player can write to us to have a match taken down.
- Analyses: the coaching reports you ask for (and which demo, player and language each one is for).
- Drawings: lines and arrows you draw on a replay, kept with your account until you clear them, remove the demo or delete your account.
- Public profile (optional): if you turn it on, your Steam name, avatar, player card (with your country, the year your Steam account was made and whether it has bans, as your Steam profile shows them), match statistics, maps and recent matches (map, date, result, statistics) are shown to everyone at an address containing your SteamID (
/p/…), and search engines may list it. It is off by default. - Teams (optional): if you create or join a team, its name, its members (other members see your Steam name and avatar), the matches added to its library, the notes written in it (author, text and the moment of the match they point at), its playlists of match moments (who added each) and its invite links (we keep only a fingerprint of each link). Members of the team can watch its matches and read its notes and playlists, and see the roles their matches show for each member (such as entry or anchor). In a review room, the members in it see your name and avatar, where you are in the replay when you lead, your drawings and your laser pointer; rooms and their drawings are kept in memory only and are gone once everyone has left. Strategic boards are kept with the team (who made each); while you edit one, the others on it see your name, avatar and pointer. A board you share with a read-only link can be watched by anyone with the link, without the team or its members. The team's playbook and its list of opponents (a name and the public SteamIDs of their players, picked from the team's matches) are kept with the team too.
- Voice comms: recordings and transcripts you open in a replay's Comms tab play in your browser and are never uploaded; only the offset you set is remembered, in your browser.
- Matches you share: when you share a match, anyone with the link can see its page and watch the 2D replay: the map, score, round results, and the players' in-game names, statistics and positions. SteamIDs and your analyses are not shown. Search engines may list the page.
- Credit history: credits you buy, spend and get refunded.
- Free AI analysis: when you use it, your SteamID, a fingerprint (SHA-256) of the demo file it was for and how many times you started it, and to check the offer's conditions, the date your Steam account was made as your public profile shows it. Each start is also logged with your SteamID and the time for a week, to cap how many free analyses are given each day. The record is kept even after you delete your account, so the one free analysis cannot be taken again (legitimate interest: preventing abuse).
- Payments: Polar takes payments as the merchant of record. Your card details never reach us; Polar only sends the order number, product, the amount paid (and any refund) and number of credits, and for a subscription (Pro, Pro+ or Esport) its plan, status and renewal date.
- Days you use the app: one entry for each day you use the app while signed in (the date only: no times, no pages), to count how many people use it each day, week and month.
- Technical data: our server logs record the method, path, result and duration of requests (a path can contain the id of a match or a FACEIT player you open), and your user number for some events. They contain no IP addresses and no search terms. Our hosting and CDN providers may process IP addresses briefly for security.
- Cookies: only the cookie that keeps you signed in (up to 30 days). No advertising or tracking cookies.
- In your browser: the app keeps a few things in your own browser that are never sent to us: your display settings (such as replay layers), the FACEIT players you opened lately, and, if you install the app, its files for opening quickly and offline. A demo you share to the installed app from another app waits in your browser until you confirm the upload or dismiss it. Clearing your browser's site data removes all of it.
Why we process it
- To run your account and show you your demos, replays, analyses and statistics, including your FACEIT profile and the players you look up (performance of our contract with you).
- To handle payments and credits (contract, legal obligations).
- To publish the matches you choose to share and the profile you make public (your consent; you can withdraw it at any time).
- To keep the service secure and prevent abuse (legitimate interest).
- To count how many people use the service, from the days they use it (legitimate interest).
- To analyze matches, which includes the data of the other players in a demo (legitimate interest). This data is part of the match's recording and is shown only to the people who have the match in their library, unless it is shared.
- To show matches from professional tournaments to signed-in users (legitimate interest: they are public matches of public competitions, already published with their recordings).
Who we share it with
- Valve (Steam): sign-in and reading your public profile.
- FACEIT: we send your public SteamID to FACEIT's data API to find your public FACEIT profile, and the nicknames you search for or the players you open to show their public profiles.
- Polar: payments. As the merchant of record, Polar collects your payment details, e-mail address and billing data itself and processes them as an independent controller under its own privacy policy; we receive only what is listed under Payments above.
- Anthropic: when you ask for an AI analysis, a summary of the match (player names, stats, rounds and key moments) is sent to be analysed. Under its commercial terms, Anthropic does not use this data to train its models. The rule-based coach sends nothing outside. AI analyses are automated, but they are coaching notes: they make no decision with legal or similarly significant effects on you.
- CSNADES.gg and YouTube: the app's lineups to learn from load their videos and pictures from CSNADES.gg, which sees your IP address as any website you load files from does. A community lineup's video comes from YouTube in its privacy-enhanced mode (youtube-nocookie.com), only once you open that lineup; YouTube's own privacy policy applies from then on.
- Hosting and storage providers (e.g. Cloudflare, Hetzner): data is stored on and travels through their infrastructure.
Some of these providers are outside Türkiye and the EU, so your data may be transferred abroad to provide the service. Where the law asks for it, these transfers rely on the safeguards it allows (such as standard contractual clauses) or on being necessary for the service you asked for. We do not sell your data or use it for advertising.
How long we keep it
| Data | Kept for |
|---|---|
| Account, credits, analyses | Until you delete your account (analyses also go when you remove the demo) |
| Teams | Until the owner deletes the team; your notes in a team go when you delete your account, and a team you own goes with your account |
| FACEIT profile copy | Replaced at each read; deleted with your account |
| FACEIT players you look up | A few minutes, in memory only |
| Matches in your library | Without a plan: 24 hours after the match arrives, unless an AI analysis is made of it in that library. With an AI analysis, or while the library's owner or the member who added it has a plan: until removed |
| Replays | Until the demo is removed from the last library that holds it |
| Pro matches | While the pro library offers them, or until taken down on request |
| Demo files you upload | Never stored: deleted as soon as the upload is analyzed, usually within a minute |
| Pro match demo files | Kept with the pro library, so its matches can be analyzed again |
| Unfinished uploads | Deleted within a few hours |
| Sessions | At most 30 days |
| Days you used the app | About 13 months, and deleted with your account |
| Free AI analysis record (SteamID, demo fingerprint) | As long as the free analysis is offered, also after the account is deleted |
| Payment records (order, amount) | As long as tax law requires; deleting your account unlinks them from you |
| Database backups | 7 days; deleted data leaves the backups within that time |
How we protect it
Connections to the site are encrypted (HTTPS). Demo files you upload are deleted as soon as they are analyzed, secrets we hold are stored encrypted, and only the person who runs the service can reach the servers. No system is perfectly secure; if a breach puts your data at risk, we tell you and the authorities as the law requires.
Children
cs2demo.gg is not meant for children under 16. If you believe a child has given us personal data, write to us and we delete it.
Your rights
Under KVKK (Article 11) and the GDPR you have the right to know whether we process your data, to get information about it and a copy of it, to learn who it is shared with, to have it corrected or deleted, to object to processing (including a decision made only by automated means that affects you), and to claim compensation for damage caused by unlawful processing. You can complain to the Personal Data Protection Authority in Türkiye (kvkk.gov.tr) or, if you live in the EU, to your country's data protection authority. You can do the most common requests yourself, right away, in the app:
- A copy of your data: write to us and we send you what we store about you.
- Remove a demo: the remove button on a match in Matches removes it, its analyses and your drawings on it from your library.
- Hide your profile: in the app, switch off Settings → Privacy → Show my profile publicly. The page goes away within minutes.
- Stop sharing: open the match and choose Share → Stop sharing. The link and the match page go away within minutes. If you appear in a match someone else shared, write to us to have it taken down.
- Delete your account: Settings → Delete account deletes your account, remaining credits, library, analyses, drawings and the copy of your FACEIT profile for good.
For anything else: [email protected]. We answer within 30 days.
Changes
If this policy changes, the date at the top changes too, and we announce important changes on the site before they take effect.